@blamejs/exceptd-skills 0.21.13 → 0.21.14

package/sbom.cdx.json

@@ -1,7 +1,7 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:e1bafb8e-608b-425f-a8ed-aa21748798a7",
+  "serialNumber": "urn:uuid:61e23ad7-9237-4fef-a585-e4c30e681cd9",
   "version": 1,
   "metadata": {
     "timestamp": "2026-09-28T00:00:00.000Z",
@@ -9,14 +9,14 @@
       {
         "vendor": "blamejs",
         "name": "scripts/refresh-sbom.js",
-        "version": "0.21.13"
+        "version": "0.21.14"
       }
     ],
     "component": {
-      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.21.13",
+      "bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.21.14",
       "type": "application",
       "name": "@blamejs/exceptd-skills",
-      "version": "0.21.13",
+      "version": "0.21.14",
       "description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (1758 CVEs / 241 CWEs / 794 ATT&CK + ICS / 174 ATLAS / 468 D3FEND / 8889 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
       "licenses": [
         {
@@ -25,17 +25,17 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.21.13",
+      "purl": "pkg:npm/%40blamejs/exceptd-skills@0.21.14",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8d7e34cf9d112b30ef8b0cb15983349b7829a39bbaeb0abfdf775a598b7995f6"
+          "content": "26e43d9e6f73cba6831642a781162d4b7ef63f6774b74d607349772cc28d536a"
         }
       ],
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.21.13"
+          "url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.21.14"
         },
         {
           "type": "vcs",
@@ -124,11 +124,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a94bb734b95f787305c8c115916ab80e37b6e998c1c73c7511f091f5313466ed"
+          "content": "e5f861bc69052d3c66de2b59e2a188a2fdf8033ce612a16bae98c25ef7602377"
         },
         {
           "alg": "SHA3-512",
-          "content": "dc2f3cdfc5595627590b0260a7b5fe0369b2027a84761826cd61205a3a3bcd3c6dfb914cae5743518a5010ada0dbdcfdabdb1b3ae9c18bc56b3ccb9550ab238d"
+          "content": "0aeda331116a12462a9ef5c42035f9231164c2e9c175cbe53df29c204e2753696fbb77b3d8c16dc38d51aee26d8662e90689dc04f4b9c2989b2b7cfaed941077"
         }
       ]
     },
@@ -1954,11 +1954,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "04d3d604468a2688e45b55b5604d442b81e7f1f32b06c5ae6afbe5ea96cd7923"
+          "content": "de9184697ed6593cde0bb16f3be6a99297e3cbd2fdc1e4a4eaaa94cdfb75ff74"
         },
         {
           "alg": "SHA3-512",
-          "content": "7cfe20164533006fb1b7981151e3f1a3398a85d221bd70830aa27326cf71f85f962f0f5116a7bccacae9941233496e35e916fef081e3a3ac14243edb4b702686"
+          "content": "c8fd09b5b1a1fb2ec9cc8f7cb4f58e68b6a328f49c5f00a9ac821a5bd3b467a67be11d8f43fa8b81a4feec84df39f790d8364773c5cf37abbbb16746d54c5ae8"
         }
       ]
     },
@@ -2074,11 +2074,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c64b1ee6a47666d75aa3fa84a8b7e30e96129cfae6d48c9972242db4c9c9a107"
+          "content": "6235ee92496261098205966f7af831c9951434ec68f0bcdf5176f7884aa3568c"
         },
         {
           "alg": "SHA3-512",
-          "content": "cd506e5f557e592a578066ff75538b0e658474d1064547e67c63758ff14ad182a706f385d95d8ec2567055445d72d40c192d6371eb13181c1e491e0c86fc450b"
+          "content": "e9d4487682133ca1231323bf2ac55fa07116a4e1dc1f298a1de03f1607026aa52be63f225b4f2a4398385b7319313567a765a77eb9b0e23063362e68772d7f78"
         }
       ]
     },
@@ -2532,6 +2532,21 @@
         }
       ]
     },
+    {
+      "bom-ref": "file:scripts/check-skill-catalog-facts.js",
+      "type": "file",
+      "name": "scripts/check-skill-catalog-facts.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f068f3ce319f7f302a6f33924ab77140b379b92d1f54ddaab5aa74ed26813164"
+        },
+        {
+          "alg": "SHA3-512",
+          "content": "19da9c54538c46136460bf06260c29e95e824b467112c4d0a7176060e221e66060458db2a2a4b80a08480df7aefc450ce9589ab8691544eb98211dc3f2e13198"
+        }
+      ]
+    },
     {
       "bom-ref": "file:scripts/check-test-count.js",
       "type": "file",
@@ -2674,11 +2689,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d6946da0c94b428b7c6f3cae4691a8508d6dc4eea2badc11ffb8cb1e4099c55d"
+          "content": "0944ae40249fa6c2412d25992627fa0d85c1ba5abb4d3267ccb4aaeaf9b43c10"
         },
         {
           "alg": "SHA3-512",
-          "content": "63def78cf777310b588544e8cf385b215272685e1c3bfcd8699256cf8aea36dd6539925b1a3cd89a3728534944cf6334c2ff179062c25b2352814dddba9f0c82"
+          "content": "2f4108d69b57805f4bf4dd8213964f4f792c6c2e1eb66fe05c2c3b3a50723cd2a8b8ee07cdd8ec8d787d6389ab0187a2097e5f37bd4c000c08582666aa22c096"
         }
       ]
     },
@@ -2929,11 +2944,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bc9084127e4e928cba439187025f9e77aaca8089fe64891312824e74dd9fdb5b"
+          "content": "8419f1792c9fe66666afd364d8e593cb3a48096e12563efba109e8a94a8fcada"
         },
         {
           "alg": "SHA3-512",
-          "content": "5d246685d7ac2cbff82b13b2e5777251e747400e9b87f45ccd57be14a193988b1056c6ebd3aa38586b42c6ee6af4b7d51670e270dfba66c588debc770ba0faf3"
+          "content": "4959ec722520f1aded1fa2dc55842edc49f5b8c38def88a405e3b83994e4d9944cf5b2dfc158a520d2e70a4bc11d9aae758f9742588fb0b3fe3466f164ca8e45"
         }
       ]
     },
@@ -3019,11 +3034,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "36312db2ffd776e57d0d0e6dafbef008784be87aeab58fb4ee8ae92d0c4f0bdf"
+          "content": "102a79be85d08b60b5550f50775201ca499577909842f740a9140fc82b6d159d"
         },
         {
           "alg": "SHA3-512",
-          "content": "796fc6a133e88bc50d54f845dcb9a086e945c6625c5068ebb3cb7ca4676e8ba4d171f7f8dd004d69dec769bf431e5e6d8bf91bb5dece5b5b1e570ce671d34e05"
+          "content": "bf5e32d78350aef82003890df5888d8f3fadacc364b80b16152ea8c96247a145c3ae4cc806e2f4c5fc7161f439fbf61e15e6f34194fadc05e50e55697d56f746"
         }
       ]
     },
@@ -3049,11 +3064,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a56a5ea0585c6c0fd5a15f7db4dd7142b87c539f0fa63376b5828953bdb7110c"
+          "content": "6aa6bbd11a57471ba53622d64d07b219571f1fc767198f9c2ffccfc6e14104fd"
         },
         {
           "alg": "SHA3-512",
-          "content": "3cb88a4583dd75e51665752b587f0fdc376103a039bc2d8ffbd8349cf9d8c8d3b6aba0de6302101e3052c1ee3a3e1907780193ce6b30d5e5b0188db226cc85c6"
+          "content": "6af4f4d6f63d27be99ca075eee197c68e527de189eabaaf85a2ec9ba08282d524dea37332ded25c90943938387dd0df091a8b422feca3c49aa3285273047998b"
         }
       ]
     },
@@ -3064,11 +3079,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "36d7e93fbacd9d797dd1127cd1db0a60d1793745d1b310d0ac3a198d8ba8f563"
+          "content": "28b075b44c53b88d09a52770f9160a139afa530124cf3762636a9f3e7a36b8cc"
         },
         {
           "alg": "SHA3-512",
-          "content": "447d066d92064e6d5fab1fff87537254544592d21038cefedeaa23bb4e1be0bdf5dde2109063d95c5fe32b085ffec7726420863d07efa1985a06f0d333884ca0"
+          "content": "d03f60fb42c3cd3ad924e2aaaecf9cbfbb482b98d6ff319d72d7d49dae803099c2c55b2f49792d27cf47027e72fa5263c279576ab0afad875dc06db07c49d6eb"
         }
       ]
     },
@@ -3154,11 +3169,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b92709bc6a55ee39a89c6c08ab6e03d7244176957fc7b314bb6d8a823d10bdc8"
+          "content": "59473887bc7b2a21de657729db3202a3f20521dbf1010fa38290f797b1b873ae"
         },
         {
           "alg": "SHA3-512",
-          "content": "19f3a4783db663bb15692e925ef50f09d6cbcaad8deaf2a457f1d6880622f94c97a9c47eaa9db34af64c19935c4c99e08295b56500d620f0580d8177111ae8b0"
+          "content": "0bfa8a70a27ce27e836f1ec20311b8a8a3520fb8629e19b4bff2b75882e27f3c4f2d23f5b4994fe0deafa580d54537b57bbe83d3d902aeb151a8ed64e440868b"
         }
       ]
     },
@@ -3169,11 +3184,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f3bac33a0ffce7a26ecf56410b0f0c1dad1c721239de2d9cb5a8bb624889bf4f"
+          "content": "27024d6dc79627befd621d4e8d0cd05ce78f76291a1d5c60d8dd337cbc6d9eb6"
         },
         {
           "alg": "SHA3-512",
-          "content": "5ab4f68068bb4b4d425772f3bbaf5a1faf3d2cdb00e93bb3341ce42b8f5348f61a6037bae060c1addd7b4074e9ba4dc19196129766db45007e77cd5a608162a7"
+          "content": "2c32bac86cd7aee4f0ad36aaa0c6f7a5cbd273f17fa9123b90dd55209153b660a3e92c401f3a92b45d6745bd585a95d75ca6eee21bc851a7f9fb08cab6b58e61"
         }
       ]
     },
@@ -3229,11 +3244,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "529c6f3970bf3003d4b866ca0d2846c8ec501c65b76fa0029b93c3b560d52973"
+          "content": "c08f53ec55f8a2704008e8c289f9a66bd3e7f7d47a7b0a246f22ecfcaacaa7f4"
         },
         {
           "alg": "SHA3-512",
-          "content": "b3cdb1d4d23cd5504c5033138a5d7cb54ac006a06efe9fb7d7dee3746a23207a6562eb8701c7dfebc8bbf82553f27eb5e90042bad501d445895f1476bc3e728f"
+          "content": "6136fbd4475b28a21f0122e279d12133eba031b464455413b2b93a44aa60eccb24195b6576e62f416e1ad93ef1c68a60beb765f954f98239f2a2ea912af47b0f"
         }
       ]
     },
@@ -3259,11 +3274,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "78a547771c42b9348a1f80201e0f1b8a5ed3e7b4f15b35b1f64cf4ee54b0480b"
+          "content": "8cbc65dab6b50b01bdddb8f042f360ebf3bb4f2d38ee7f4d4e9c080d179ca95b"
         },
         {
           "alg": "SHA3-512",
-          "content": "8e590819ddd8bf102c8d4006deb554f85a69067be7448b8995a66e5344c35d0d873ab847ff0b738d99bfc615f0573b3f3ff05f98239d809f7e8a820daad0ed0f"
+          "content": "3ab4ea003f86f9b888be288eb79f8d85d2579786c01c26962d07756ff86f62070602ec9ef770cd16499fd78d3c82fba4a18edfc4d17d818c2f787996da0c973e"
         }
       ]
     },
@@ -3379,11 +3394,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "abdc725a1f7c0e919118ff63a6cf818c544a2debe8c3570a8d8abfd9acd9f1e4"
+          "content": "072aeac64d77b7d0d65e2882c60b0980e5883dd0e27f9cd7b62c0f26cbbb835f"
         },
         {
           "alg": "SHA3-512",
-          "content": "be8d758f8c77aa5829e3eb6ab1c14315aa9d9810125195e9afa0189b11be5ff68ce951cb8283b86ccd824048234e0c79bc2a7cbed91a656bb49a8f576317caa2"
+          "content": "119434a503e192316ff72fcb80658f11fabee51a3a6df46ca3c208c51cea7eb84bda7df9a2f57ac7d2cbba3d1623044194dff4e8b7e3eb1b30ee4c13cb3e00f5"
         }
       ]
     },
@@ -3484,11 +3499,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9b836c4c140c2fbd9ce0c5b900cb344c8f45d4e5fabdbb23ff7a95887445f68f"
+          "content": "b6357b23119374ea5caed2873babbf8d158da0a54fc566e3c5c8559a28b7b79d"
         },
         {
           "alg": "SHA3-512",
-          "content": "ac9187c16a1dad880c6e9ce054201e4b11827d42fb6a46cb33555beb02ba19de7174e8801b18d95c49f1fbfb1676cb60865f2444751279bbae364637623cfbce"
+          "content": "9239a20c968755fd8c279189b5f2e507d7c99f5f786323f472e3f11939a79c1e2f14cbff1ad157f0539473a1aa364adceb1264968294135846f00297ce5cf84b"
         }
       ]
     },
@@ -3544,11 +3559,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2e8ffedb22bef2f76a8b5afb425480cf815ffec64063d809ba4f6eb78f03e411"
+          "content": "b5046e711003123bf2ec31c1ddc51281ae1349747ea65a7d787287a5d33aefb2"
         },
         {
           "alg": "SHA3-512",
-          "content": "abb9dba7ee8fe9ab0f25aeb6b8444c56f35a3d48d5ddbba389af142e05cef343917d1ea9dbe75308f37c52a909406af87b2c00f783508fee946f2b4c7e4e935d"
+          "content": "98abdac02d680a5f822acec22e50a9d60e91c4bc5cf1ca530df1da97368705100347d35b4c83cdee9bac4c16f2258f6d5ab4312cee4402272c2c8f6890f14f1c"
         }
       ]
     },
@@ -3589,11 +3604,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6de2d1b2426019f5f026162216e0ae673b5f186441781aac91e64c22e987b5d2"
+          "content": "f7694c0a0e335f98631afb7e414baab0528e68830cfd02be9d76075ee50899fa"
         },
         {
           "alg": "SHA3-512",
-          "content": "6564677c70f4166470f39bd85c58d9f4b5e697bf3fde0ff4cff797f9359bb7fdfbb2aba4d3e118cc984057fb552d33621d8f41b05905d68c6292cf71456e2d39"
+          "content": "3888bb2565075b86d6995c320e75be9a2fe99c98479a909f181b117e4d3d3a5ffde24e4133d91b267d3be9139cdb2a310369874257d666cfea1e1ec6c1c033e1"
         }
       ]
     },
@@ -3604,11 +3619,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13668235ae4207fe6ab741e59de88772304788e43f0026e0aaafb239ba20b8ef"
+          "content": "058b67901e836c20f8730d0c09eabb4bd9600ee0b720d8b6a48bcee5fb08cb7e"
         },
         {
           "alg": "SHA3-512",
-          "content": "50252b4b36632973c5e07818ed4d5cbe4b052735468394e15412da4d9179c7955d1b91a8336ab942bbeb5b5c9f9ab3bcbfb8108a647e62700756626ca4ebcf50"
+          "content": "b94b9f6c97b7b24c520cd7aa354da49a9a7ed63d321e360408804eaeb7e079011ddaf32c882ce85dae0a8e34626b1d9d3e5d026b4de397c2c9ac339a600a6e01"
         }
       ]
     },
@@ -3664,11 +3679,11 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c51360a0353201de7438a2f045bfb291102ceed93ea44a2f4d86aa1c8bd2d465"
+          "content": "7733233b8eef00b4592d9ad4336cbd815250565bcd54c4b476fbdfe9a73ad9c8"
         },
         {
           "alg": "SHA3-512",
-          "content": "48cb015315e41f6af41dbdfca52e7c1e56b73cdfaba5b5285b39923ddf537e6e134ee6a99270b8a2591163c521ffa991724d0e612c9bdcb6c4bbb6cf7248f1c1"
+          "content": "4fea76683b42928e67867c6e4a030f210319a1332d6ae075377658204b7d8804cbcbe1fbd00fe0b7064b4d49b62421693c88076ee9bcc91df451f55d1fa42104"
         }
       ]
     },

package/scripts/check-skill-catalog-facts.js

@@ -0,0 +1,304 @@
+#!/usr/bin/env node
+"use strict";
+
+/**
+ * Skill catalog-facts gate. Exit 0 consistent, 1 when a skill states a CVE fact
+ * that differs from data/cve-catalog.json.
+ *
+ * A markdown table row is compared when the first cell that names a CVE names
+ * exactly one catalog CVE. Its cells are compared by column header: CVSS, RWEP, a KEV column (Yes/No, and the listing date when the
+ * cell gives one), a public-exploit column (Yes/No), and an AI column. An
+ * "AI-Discovered" column is compared with ai_discovered; an AI column that also
+ * covers acceleration, enablement or weaponization is compared with
+ * ai_discovered OR ai_assisted_weaponization. A prose line that names exactly one
+ * catalog CVE is compared on "RWEP <n>", "CVSS <n.n>", "KEV-listed <date>" and
+ * "not KEV-listed". On any line, the parentheses that follow a CVE id are read
+ * as that CVE's values, so a list such as "CVE-A (90), CVE-B (Dirty Frag, 38,
+ * CVSS 7.8)" is compared CVE by CVE. A cell or line that states no comparable value is skipped,
+ * and so is a CVE the catalog does not hold, a row whose CVE cell only points
+ * to one ("No vendor CVE; see CVE-..."), and a value the text marks as superseded.
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+
+const ROOT = path.resolve(__dirname, "..");
+const CVE = /CVE-\d{4}-\d{4,}/g;
+const DATE = /\d{4}-\d{2}-\d{2}/;
+
+const splitRow = (line) => line.trim().replace(/^\|/, "").replace(/\|$/, "").split("|").map((c) => c.trim());
+const isDivider = (cells) => cells.every((c) => /^:?-{2,}:?$/.test(c));
+const uniqueCves = (text) => [...new Set(text.match(CVE) || [])];
+
+/** Leading Yes or No of a cell; anything else ("Partial", "varies") is not compared. */
+function yesNo(cell) {
+  if (/^yes\b/i.test(cell)) return true;
+  if (/^no\b/i.test(cell)) return false;
+  return null;
+}
+
+/**
+ * An AI cell's claim: a leading Yes/No, a declarative form the column counts as
+ * yes ("AI-discovered", "AI-weaponized"), or "Human-discovered" as no.
+ */
+function aiValue(cell, yesForm) {
+  const v = yesNo(cell);
+  if (v !== null) return v;
+  if (yesForm.test(cell)) return true;
+  if (/^human[- ](?:discovered|found)\b/i.test(cell)) return false;
+  return null;
+}
+
+/** The CVSS major version a text names ("CVSS 4.0", "CVSS v3.1"), or null. */
+function cvssVersion(vector) {
+  const m = /^CVSS:(\d)/.exec(vector || "");
+  return m ? m[1] : null;
+}
+
+function columnKind(header) {
+  const h = header.toLowerCase().replace(/[`*?]/g, "").trim();
+  if (/^cvss\b/.test(h)) return "cvss";
+  if (/^rwep\b/.test(h)) return "rwep";
+  if (/\bkev\b/.test(h)) return "kev";
+  if (/\bpoc\b|public exploit/.test(h)) return "poc";
+  if (/^ai[- ]discovered$/.test(h)) return "ai_discovered";
+  if (/^ai\b/.test(h)) return "ai_any";
+  return null;
+}
+
+/** A cell's text with Markdown emphasis and code marks removed. */
+const plain = (cell) => cell.replace(/[*_`]/g, "").trim();
+
+function compareCell(kind, raw, e, say) {
+  const cell = plain(raw);
+  if (kind === "cvss") {
+    const m = /^(\d{1,2}(?:\.\d)?)\b/.exec(cell);
+    if (m && Number(m[1]) !== e.cvss_score) say(`CVSS ${m[1]}, catalog ${e.cvss_score}`);
+  } else if (kind === "rwep") {
+    const m = /^(\d{1,3})(?![\d+–-]|\.\d)/.exec(cell);
+    if (m && Number(m[1]) !== e.rwep_score) say(`RWEP ${m[1]}, catalog ${e.rwep_score}`);
+  } else if (kind === "kev") {
+    const v = yesNo(cell);
+    if (v === null) return;
+    if (v !== Boolean(e.cisa_kev)) say(`KEV "${cell.slice(0, 40)}", catalog ${e.cisa_kev ? `listed ${e.cisa_kev_date}` : "not listed"}`);
+    else if (v) {
+      const d = DATE.exec(cell);
+      if (d && e.cisa_kev_date && d[0] !== e.cisa_kev_date) say(`KEV date ${d[0]}, catalog ${e.cisa_kev_date}`);
+    }
+  } else if (kind === "poc") {
+    // "Partial" is the catalog's own granular value for a conceptual or chain-only
+    // exploit, which it scores as poc_available true.
+    const v = /^partial\b/i.test(cell) ? true : yesNo(cell);
+    if (v !== null && v !== Boolean(e.poc_available)) say(`public exploit "${cell.slice(0, 40)}", catalog poc_available ${e.poc_available}`);
+  } else if (kind === "ai_discovered") {
+    const v = aiValue(cell, /^ai[- ](?:discovered|assisted)\b/i);
+    if (v !== null && v !== Boolean(e.ai_discovered)) say(`AI-discovered "${cell.slice(0, 40)}", catalog ai_discovered ${e.ai_discovered}`);
+  } else if (kind === "ai_any") {
+    const v = aiValue(cell, /^ai[- ](?:discovered|assisted|accelerated|enabled|weaponi[sz]ed)\b/i);
+    const expected = Boolean(e.ai_discovered) || Boolean(e.ai_assisted_weaponization);
+    if (v !== null && v !== expected) say(`AI "${cell.slice(0, 40)}", catalog ai_discovered ${e.ai_discovered} / ai_assisted_weaponization ${e.ai_assisted_weaponization}`);
+  }
+}
+
+/** A value the text marks as superseded ("the initial CVSS 9.8 was withdrawn"). */
+function historical(line, m) {
+  const before = line.slice(Math.max(0, m.index - 24), m.index);
+  const after = line.slice(m.index + m[0].length, m.index + m[0].length + 24);
+  return /\b(?:initial|original|previous(?:ly)?|earlier|former|prior)\s*$/i.test(before) || /^\s*(?:was|were|is)\s+(?:withdrawn|superseded|corrected|replaced)\b/i.test(after);
+}
+
+function compareProse(text, e, say) {
+  const line = plain(text);
+  for (const m of line.matchAll(/RWEP(?: score)?(?:\s*(?:of|is|=|:))?\s*(\d{1,3})(?![\d+–-]|\.\d)/gi)) {
+    if (historical(line, m)) continue;
+    if (Number(m[1]) !== e.rwep_score) say(`RWEP ${m[1]}, catalog ${e.rwep_score}`);
+  }
+  for (const m of line.matchAll(/CVSS(?:\s*v?(\d)(?:\.\d)?\b)?(?:\s*(?:score|base score))?(?:\s*(?:of|is|=|:))?\s*(\d{1,2}\.\d)\b/gi)) {
+    const version = m[1] || null;
+    if (version && version !== cvssVersion(e.cvss_vector)) continue;
+    if (historical(line, m)) continue;
+    if (Number(m[2]) !== e.cvss_score) say(`CVSS ${m[2]}, catalog ${e.cvss_score}`);
+  }
+  for (const m of line.matchAll(/\bKEV[- ]listed(?: on)? (\d{4}-\d{2}-\d{2})/g)) {
+    if (e.cisa_kev_date && m[1] !== e.cisa_kev_date) say(`KEV date ${m[1]}, catalog ${e.cisa_kev_date}`);
+    if (!e.cisa_kev) say(`says KEV-listed ${m[1]}, catalog not listed`);
+  }
+  if (/\bnot (?:yet )?(?:CISA )?KEV[- ]listed\b|\bnot (?:yet )?(?:on|in) (?:the )?(?:CISA )?KEV\b|\bKEV(?: listing)?:? pending\b|\bpending (?:CISA )?KEV\b/i.test(line) && e.cisa_kev) {
+    say(`says not KEV-listed, catalog listed ${e.cisa_kev_date}`);
+  }
+}
+
+/**
+ * Values in the parentheses that follow a CVE id, or that open with one, belong
+ * to that CVE: "CVE-X (Copy Fail, RWEP 90, CVSS 7.8)", "CVE-X (Dirty Frag, 38,
+ * CVSS 7.8)" or "(CVE-X, CVSS 7.8 / AV:L)". A bare 1-3 digit item is read as
+ * RWEP when the line mentions RWEP.
+ */
+const PER_CVE = /(CVE-\d{4}-\d{4,})\s*\(([^()]*)\)|\((CVE-\d{4}-\d{4,})[,;:]\s*([^()]*)\)/g;
+
+const UNATTRIBUTED = 'states a score for several CVEs outside per-CVE parentheses; write each as "CVE-X (name, RWEP n, CVSS n.n)"';
+
+/** A score statement: "RWEP 53", "CVSS 8.8", "**RWEP:** 53/100". */
+const SCORE = /RWEP(?: score)?\*{0,2}(?:\s*(?:of|is|=|:))?\*{0,2}\s*\d{1,3}(?![\d+–-]|\.\d)|CVSS(?:\s*v?\d(?:\.\d)?\b)?(?:\s*(?:score|base score))?\*{0,2}(?:\s*(?:of|is|=|:))?\*{0,2}\s*\d{1,2}\.\d\b|\b\d{1,3}\/100\b/i;
+
+function compareParentheticals(line, catalog, say) {
+  const rwepContext = /\bRWEP\b/i.test(line);
+  let found = 0;
+  for (const raw of line.matchAll(PER_CVE)) {
+    const m = raw[1] ? [raw[0], raw[1], raw[2]] : [raw[0], raw[3], raw[4]];
+    const e = catalog[m[1]];
+    if (!e) continue;
+    found++;
+    const inner = m[2];
+    const tell = (msg) => say(m[1], msg);
+    compareProse(inner, e, tell);
+    if (rwepContext && !/\bRWEP\b/i.test(inner)) {
+      for (const item of inner.split(/[,;]/).map((s) => s.trim())) {
+        if (/^\d{1,3}$/.test(item) && Number(item) !== e.rwep_score) tell(`RWEP ${item}, catalog ${e.rwep_score}`);
+      }
+    }
+  }
+  return found;
+}
+
+/** Factor-table row labels and the rwep_factors key each one scores. */
+const FACTOR_KEYS = [
+  [/^cisa kev$/, "cisa_kev"],
+  [/^poc public$|^public poc$/, "poc_available"],
+  [/^ai[- ](?:assisted|discovered|factor)$/, "ai_factor"],
+  [/^active exploitation$/, "active_exploitation"],
+  [/^blast radius$/, "blast_radius"],
+  [/^patch available$/, "patch_available"],
+  [/^live patch available$/, "live_patch_available"],
+  [/^reboot required$/, "reboot_required"],
+];
+
+/**
+ * A "Factor | Value | Points" row under a heading that names one catalog CVE:
+ * the points must equal that CVE's rwep_factors entry, and the RWEP row must
+ * equal its rwep_score.
+ */
+/** Factor rows whose Value cell states a catalog boolean, with how to read it. */
+const FACTOR_VALUES = [
+  [/^cisa kev$/, (e) => Boolean(e.cisa_kev), "cisa_kev"],
+  [/^poc public$|^public poc$/, (e) => Boolean(e.poc_available), "poc_available"],
+  [/^ai[- ]discovered$/, (e) => Boolean(e.ai_discovered), "ai_discovered"],
+  [/^ai[- ](?:assisted|factor)$/, (e) => Boolean(e.ai_discovered) || Boolean(e.ai_assisted_weaponization), "ai_discovered / ai_assisted_weaponization"],
+  [/^patch available$/, (e) => Boolean(e.patch_available), "patch_available"],
+  [/^live patch available$/, (e) => Boolean(e.live_patch_available), "live_patch_available"],
+  [/^reboot required$/, (e) => Boolean(e.patch_required_reboot), "patch_required_reboot"],
+];
+
+function compareFactorRow(cells, rawHeader, e, say) {
+  const pointsCol = rawHeader.findIndex((h) => /^\s*points\s*$/i.test(h));
+  if (pointsCol < 1) return false;
+  const label = (cells[0] || "").replace(/\*/g, "").trim().toLowerCase();
+  const valueCol = rawHeader.findIndex((h) => /^\s*value\s*$/i.test(h));
+  const valueRule = FACTOR_VALUES.find(([re]) => re.test(label));
+  if (valueCol > 0 && valueRule) {
+    const cell = plain(cells[valueCol] || "");
+    const v = /^partial\b/i.test(cell) && valueRule[2] === "poc_available" ? true : yesNo(cell);
+    if (v !== null && v !== valueRule[1](e)) say(`factor table ${cells[0].replace(/\*/g, "").trim()} value "${cell.slice(0, 40)}", catalog ${valueRule[2]} ${valueRule[1](e)}`);
+  }
+  const m = /^\*{0,2}\s*([+\-−]?\d{1,3})\b/.exec(cells[pointsCol] || "");
+  if (!m) return false;
+  const points = Number(m[1].replace("−", "-"));
+  if (/^rwep(?: total)?$/.test(label)) {
+    if (points !== e.rwep_score) say(`factor table RWEP ${points}, catalog ${e.rwep_score}`);
+    return true;
+  }
+  const hit = FACTOR_KEYS.find(([re]) => re.test(label));
+  if (!hit || !e.rwep_factors || typeof e.rwep_factors[hit[1]] !== "number") return false;
+  if (points !== e.rwep_factors[hit[1]]) say(`factor table ${cells[0].replace(/\*/g, "").trim()} ${points}, catalog rwep_factors.${hit[1]} ${e.rwep_factors[hit[1]]}`);
+  return true;
+}
+
+function checkSkill(file, catalog) {
+  const seen = new Set();
+  const failures = [];
+  const push = (msg) => { if (!seen.has(msg)) { seen.add(msg); failures.push(msg); } };
+  let compared = 0;
+  let header = null;
+  let rawHeader = null;
+  let sectionCve = null;
+  const lines = fs.readFileSync(file, "utf8").split(/\r?\n/);
+  lines.forEach((line, i) => {
+    const where = `${path.relative(ROOT, file).replace(/\\/g, "/")}:${i + 1}`;
+    if (/^#{1,6}\s/.test(line)) {
+      const headingIds = uniqueCves(line);
+      sectionCve = headingIds.length === 1 && catalog[headingIds[0]] ? headingIds[0] : null;
+    }
+    compared += compareParentheticals(line, catalog, (id, msg) => push(`${where} ${id}: ${msg}`));
+    if (/^\s*\|/.test(line)) {
+      const cells = splitRow(line);
+      if (header === null) { rawHeader = cells; header = cells.map(columnKind); return; }
+      if (isDivider(cells)) return;
+      if (sectionCve && uniqueCves(line).length === 0) {
+        if (compareFactorRow(cells, rawHeader, catalog[sectionCve], (msg) => push(`${where} ${sectionCve}: ${msg}`))) compared++;
+        return;
+      }
+      const idCell = cells.find((c) => uniqueCves(c).length > 0) || "";
+      if (/^(?:no|n\/a)\b/i.test(idCell) || /\bsee\s+CVE-/i.test(idCell)) return;
+      const ids = uniqueCves(idCell);
+      if (ids.length > 1) {
+        const known = ids.filter((id) => catalog[id]);
+        const scored = header.some((kind, k) => (kind === "cvss" || kind === "rwep") && /^\d/.test(plain(cells[k] || "")));
+        if (known.length && scored) push(`${where} ${ids.join(", ")}: ${UNATTRIBUTED}`);
+        return;
+      }
+      if (ids.length !== 1 || !catalog[ids[0]]) return;
+      const e = catalog[ids[0]];
+      compared++;
+      header.forEach((kind, k) => {
+        if (kind && cells[k] !== undefined) compareCell(kind, cells[k], e, (msg) => push(`${where} ${ids[0]}: ${msg}`));
+      });
+      return;
+    }
+    header = null;
+    const ids = uniqueCves(line);
+    if (ids.length > 1) {
+      const rest = plain(line.replace(PER_CVE, " "));
+      const m = SCORE.exec(rest);
+      if (ids.some((id) => catalog[id]) && m && !historical(rest, m)) push(`${where} ${ids.join(", ")}: ${UNATTRIBUTED}`);
+      return;
+    }
+    if (ids.length !== 1 || !catalog[ids[0]]) return;
+    compared++;
+    compareProse(line, catalog[ids[0]], (msg) => push(`${where} ${ids[0]}: ${msg}`));
+  });
+  return { failures, compared };
+}
+
+function check(skillsDir, catalog) {
+  const failures = [];
+  let compared = 0;
+  let files = 0;
+  for (const name of fs.readdirSync(skillsDir).sort()) {
+    const file = path.join(skillsDir, name, "skill.md");
+    if (!fs.existsSync(file)) continue;
+    files++;
+    const r = checkSkill(file, catalog);
+    failures.push(...r.failures);
+    compared += r.compared;
+  }
+  return { failures, compared, files };
+}
+
+function main() {
+  const skillsDir = process.argv[2] || path.join(ROOT, "skills");
+  const catalogFile = process.argv[3] || path.join(ROOT, "data", "cve-catalog.json");
+  const catalog = JSON.parse(fs.readFileSync(catalogFile, "utf8"));
+  const { failures, compared, files } = check(skillsDir, catalog);
+  if (failures.length) {
+    console.error("Skill catalog facts: FAIL");
+    for (const f of failures) console.error(`  ${f}`);
+    console.error(`\n${failures.length} skill ${failures.length === 1 ? "statement differs" : "statements differ"} from data/cve-catalog.json. Update the skill text to the catalog value.`);
+    process.exitCode = 1;
+    return;
+  }
+  console.log(`Skill catalog facts: PASS — ${compared} CVE rows and lines across ${files} skills match data/cve-catalog.json`);
+}
+
+if (require.main === module) main();
+
+module.exports = { check, checkSkill, columnKind, yesNo };

package/scripts/predeploy.js

@@ -218,6 +218,14 @@ const GATES = [
     args: [path.join(ROOT, "scripts", "check-ism-control-references.js")],
     ciJobName: "Data integrity (catalog + manifest snapshot)",
   },
+  {
+    // A skill that states a CVE's CVSS, RWEP, KEV status, public-exploit or
+    // AI-discovery value must agree with data/cve-catalog.json.
+    name: "Skill catalog facts (skill CVE statements vs. the catalog)",
+    command: process.execPath,
+    args: [path.join(ROOT, "scripts", "check-skill-catalog-facts.js")],
+    ciJobName: "Data integrity (catalog + manifest snapshot)",
+  },
 ];
 
 function runGate(gate) {

package/skills/ai-attack-surface/skill.md

@@ -60,7 +60,7 @@ forward_watch:
   - Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — Chroma vector DB CWE-190 + CWE-362 chain by haehae; impacts RAG vector store integrity; track patch and downstream RAG advisory
   - Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge overly permissive allowed list by Satoki Tsuji; AI training-stack supply-chain exposure; track patch and SBOM advisory
   - Pwn2Own Berlin 2026 (disclosed 2026-05-14, embargo ends 2026-08-12) — NVIDIA Megatron Bridge path traversal by haehae; AI training-stack file-system trust boundary; track patch and SBOM advisory
-last_threat_review: "2026-09-18"
+last_threat_review: "2026-09-28"
 ---
 
 # AI Attack Surface Assessment
@@ -141,7 +141,7 @@ AI-assisted reconnaissance is observed at 36,000 probes per second per campaign.
 
 ### 11. AI-Discovered + AI-Weaponized Supply-Chain Worms
 
-**CVE-2026-45321** — Mini Shai-Hulud TanStack npm worm (CVSS 9.6, ~150M weekly downloads across 42 @tanstack/* packages, CISA KEV pending). Disclosed 2026-05-11. The attack chain — Pwn-Request via `pull_request_target` on TanStack's bundle-size workflow, pnpm-store cache poisoning under the `actions/cache` key, and OIDC-token theft on the next main push — is engineering-grade and weaponizes three independently-benign primitives. While attribution (TeamPCP) records no AI-assisted exploit development for this specific instance, the worm pattern is exactly what AML.T0017-class capability development now produces at AI cadence: chained CI/CD primitives that no individual component owner recognises as exploitable. Treat the @tanstack/* surface as an exemplar of the broader AML.T0010 (AI Supply Chain Compromise) threat applied to JS toolchains that the AI assistant ecosystem depends on.
+**CVE-2026-45321** — Mini Shai-Hulud TanStack npm worm (CVSS 9.6, ~150M weekly downloads across 42 @tanstack/* packages, KEV-listed 2026-05-27). Disclosed 2026-05-11. The attack chain — Pwn-Request via `pull_request_target` on TanStack's bundle-size workflow, pnpm-store cache poisoning under the `actions/cache` key, and OIDC-token theft on the next main push — is engineering-grade and weaponizes three independently-benign primitives. While attribution (TeamPCP) records no AI-assisted exploit development for this specific instance, the worm pattern is exactly what AML.T0017-class capability development now produces at AI cadence: chained CI/CD primitives that no individual component owner recognises as exploitable. Treat the @tanstack/* surface as an exemplar of the broader AML.T0010 (AI Supply Chain Compromise) threat applied to JS toolchains that the AI assistant ecosystem depends on.
 
 ---